On card display of data from secured chip

ABSTRACT

A retrofitted credit card including a certified smart card chip, a display and retrofitted emulation circuitry operative to enable the certified smart card chip to communicate information to the display notwithstanding that the certified smart card chip is configured for communication only with an external read/write device.

REFERENCE TO RELATED APPLICATIONS

Reference is hereby made to U.S. Provisional Patent Application Ser. No.61/193,908, filed Jan. 7, 2009 and entitled ON-CARD INTERFACE & METHODFOR ACTIVATION OF A SECURED DUAL-INTERFACE SMART CARD MICROCONTROLLER,and to U.S. Provisional Patent Application Ser. No. 61/202,182, filedFeb. 4, 2009 and entitled ON-CARD INTERFACE FOR A SECURED DUAL-INTERFACESMART CARD MICROCONTROLLER WITH A SINGLE INPUT/OUTPUT PIN, thedisclosures of which are hereby incorporated by reference and priorityof which are hereby claimed pursuant to 37 CFR 1.78(a)(4) and (5)(i).

FIELD OF THE INVENTION

The present invention relates to smart cards generally and moreparticularly to smart cards based on secure smart card chips.

BACKGROUND OF THE INVENTION

The following publications are believed to represent the current stateof the art:

U.S. Pat. Nos. 4,667,087; 5,478,994; 5,485,520; 5,590,038; 6,202,927;6,247,129; 6,595,342; 6,641,050; 6,769,607; 7,128,274 and 7,530,495.

U.S. PUBLISHED PATENT APPLICATIONS: 2005/0231490; 2006/0242698;2007/0235539; 2007/0241183; 2008/0011833 and 2009/0255996;

NXP publication “e-Transactions on the move” available on the Internetat the URL http://www.nxp.com/infocus/campaigns/cartes/index.html

PCWorld publication “Visa Toys with Credit Card Displays” available onthe Internet at the URLhttp://www.pcworld.com/article/115910/visa_toys_with_credit_card_displays.html

Publication “Anti-fraud credit card features E-Ink display” available onthe Internet at the URLhttp://www.gizmag.com/emue-credit-card-visa-fraud/13374/picture/105352/

SUMMARY OF THE INVENTION

The present invention seeks to provide an improved smart card based on asecure smart card chip.

There is thus provided in accordance with a preferred embodiment of thepresent invention a retrofitted credit card including a certified smartcard chip, a display and retrofitted emulation circuitry operative toenable the certified smart card chip to communicate information to thedisplay notwithstanding that the certified smart card chip is configuredfor communication only with an external read/write device.

There is also provided in accordance with another preferred embodimentof the present invention a retrofitted debit card including a certifiedsmart card chip, a display and retrofitted emulation circuitry operativeto enable the certified smart card chip to communicate information tothe display notwithstanding that the certified smart card chip isconfigured for communication only with an external read/write device.

There is further provided in accordance with yet another preferredembodiment of the present invention a retrofitted smart card including acertified smart card chip, a display and retrofitted emulation circuitryoperative to enable the certified smart card chip to communicateinformation to the display notwithstanding that the certified smart cardchip is configured for communication only with an external read/writedevice.

There is yet further provided in accordance with still another preferredembodiment of the present invention a retrofitted smart card including acertified smart card chip including secure access circuitry permittingcommunication exclusively with a certified smart card chip reader, adisplay and retrofitted circuitry operative to enable the certifiedsmart card chip to communicate data to the display and also tocommunicate with the certified smart card chip reader.

Preferably, the retrofitted card also includes a generally credit-cardsized substrate supporting the certified smart card chip, the displayand the retrofitted circuitry. Additionally or alternatively, theretrofitted card also includes an electrical power element operative forpowering the certified smart card chip, the retrofitted circuitry andthe display. Alternatively or additionally, the retrofitted card alsoincludes power management circuitry operative to provide electricalpower to the certified smart card chip and to the display generally atnon-overlapping times.

In accordance with a preferred embodiment of the present invention thesubstrate has a thickness which does not exceed 0.8 mm.

In accordance with a preferred embodiment of the present invention theretrofitted card also includes retrofit firmware for operating thecertified smart card chip at least in the absence of an externalread/write device.

Preferably, the retrofitted circuitry includes hardware external to thecertified smart card chip. Additionally or alternatively, the certifiedsmart card chip is a smart card chip which is operable to communicatedata only with an external read/write device and with the display.

In accordance with a preferred embodiment of the present invention theretrofitted card also includes at least one of a contact interface and acontactless interface mounted on the substrate. Additionally oralternatively, the certified smart card chip is employed in aretrofitted context to operate in a manner other than its intendedmanner of use.

Preferably, the retrofitted card also includes a bus which interconnectsthe certified smart card chip with the contact interface. Alternatively,the retrofitted card also includes a bidirectional connection whichinterconnects the certified smart card chip with the contactlessinterface.

In accordance with a preferred embodiment of the present invention theretrofitted card also includes a manually operable display controlswitch. Preferably, the retrofitted circuitry includes control logiccircuitry which receives electrical power from power managementcircuitry. Additionally, the power management circuitry includes aswitch actuation sensor which is coupled to the display control switch.

Preferably, the switch actuation sensor provides a switch actuationoutput to first and second relay control circuits. Additionally, thefirst relay control circuit is operative in response to the switchactuation output to provide electrical power to the certified smart cardchip.

In accordance with a preferred embodiment of the present invention thesecond relay control circuit is operative in response to the switchactuation output to provide electrical power to the control logiccircuitry, to a display driver and to an interval timer.

Preferably, the retrofitted card also includes real time clock circuitryproviding real time security code generation.

There is also provided in accordance with another preferred embodimentof the present invention a method of providing a credit card with acard-mounted display function including providing a certified smart cardchip, associating a display with the certified smart card chip andemulating an external read/write device to enable the certified smartcard chip to communicate with the display notwithstanding that thecertified smart card chip had originally been configured for securecommunication only with an external read/write device.

There is further provided in accordance with yet another preferredembodiment of the present invention a method of providing a debit cardwith a card-mounted display function including providing a certifiedsmart card chip, associating a display with the certified smart cardchip and emulating an external read/write device to enable the certifiedsmart card chip to communicate with the display notwithstanding that thecertified smart card chip had originally been configured for securecommunication only with an external read/write device.

There is even further provided in accordance with still anotherpreferred embodiment of the present invention a method of providing asmart card with a card-mounted display function including providing acertified smart card chip, associating a display with the certifiedsmart card chip and emulating an external read/write device to enablethe certified smart card chip to communicate with the displaynotwithstanding that the certified smart card chip had originally beenconfigured for secure communication only with an external read/writedevice.

There is still further provided in accordance with yet another preferredembodiment of the present invention a method for providing a smart cardwith a card-mounted display function including providing a certifiedsmart card chip including secure access circuitry permittingcommunication exclusively with a certified smart card chip reader,associating a display with the certified smart card chip and causing thecertified smart card chip to communicate data to the display and also tocommunicate with the certified smart card chip reader.

Preferably, the method also includes running retrofit firmware residingon the certified smart card chip for operating the certified smart cardchip at least in the absence of an external read/write device.Additionally or alternatively, the method also includes providing aswitch actuation signal when a user actuates a display control switchand responsive to the switch actuation signal, supplying a voltage tothe certified smart card chip and simultaneously actuating a clockoscillator which begins to provide a clock signal to a clock terminal ofthe certified smart card chip.

In accordance with a preferred embodiment of the present invention, themethod also includes supplying a voltage to the certified smart cardchip enabling the certified smart card chip to run retrofit firmwareinstalled thereon including mode of operation identificationfunctionality, which enables the certified smart card chip todistinguish between operation in communication with a conventionalcontact or contactless smart card reader and stand-alone operation.Additionally, the method also includes the stand-alone mode of operationemploying at least some of the same data terminals which are used fornon-stand-alone operation.

Preferably, the method also includes the mode of operationidentification functionality sensing whether the serial data terminal ofthe certified smart card chip is in a positive or zero logic state,wherein a positive logic state indicates that a conventional contactsmart card reader is galvanically connected to the certified smart cardchip and zero logic state indicates that the certified smart card chipis connected for operation in a stand-alone mode.

In accordance with a preferred embodiment of the present invention, themethod also includes that when the certified smart card chip operates ina stand-alone mode of operation, at least one of the following stepsoccurs:

-   -   I. retrofit firmware controls communications to and from the        certified smart card chip;    -   II. the retrofit firmware employs the clock signals received        from a clock oscillator;    -   III. the retrofit firmware operates the certified smart card        chip for processing and displaying secure data on the display;    -   IV. the retrofit firmware configures a display driver to display        the secure data;    -   IV. the retrofit firmware sets a predetermined time duration on        an interval timer;    -   V. the retrofit firmware issues a single instruction which        results in the sequence indicated below:        -   the supply of electrical power to the certified smart card            chip is terminated, thus disabling the retrofit firmware;            and        -   once the supply of electrical power to the certified smart            card chip has been terminated and the retrofit firmware has            been disabled, the display driver causes the display to            display the secure data for a predetermined time duration;            and        -   at the end of the predetermined time duration, the supply of            electrical power to the display is terminated.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention will be understood and appreciated more fully fromthe following detailed description, taken in conjunction with thedrawings in which:

FIG. 1 is a simplified pictorial illustration of a scenariodemonstrating typical use of a debit card, constructed and operative inaccordance with a preferred embodiment of the present invention;

FIG. 2 is a simplified pictorial illustration of a scenariodemonstrating typical use of a credit card, constructed and operative inaccordance with a preferred embodiment of the present invention;

FIG. 3 is a simplified illustration of a smart card constructed andoperative in accordance with a preferred embodiment of the presentinvention including a banking industry certification standards compliantsmart card chip retrofitted to work with a display in a stand-alone modeof operation;

FIG. 4 is a simplified electronic diagram of the smart card of FIG. 3;

FIG. 5 is a simplified electronic diagram of control logic circuitryforming part of the circuitry of FIG. 4;

FIG. 6 is a simplified electronic diagram of power management circuitryforming part of the circuitry of FIG. 4; and

FIG. 7 is a simplified general flow diagram illustratingretrofit-enabled operation of a preferred embodiment of the presentinvention.

DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT

Reference is now made to FIG. 1, which is a simplified pictorialillustration of a scenario demonstrating typical use of a smart debitcard, constructed and operative in accordance with a preferredembodiment of the present invention. The term “smart debit card” as usedthroughout refers to a debit card including a certified smart card chipand is retrofitted for stand-alone operation.

The term “certified smart card chip” is defined as a smart card chipwhich is ordinarily operable to communicate data only with an externalread/write device.

Preferred examples of certified smart card chips are chips which complywith one or both of the following certification standards: ISO/IEC 7816and ISO/IEC 14443. Such chips preferably comply with additionalstandards, such as Common Criteria EAL4+/EAL5+ (ISO/IEC15408 Informationtechnology—Security techniques—Evaluation criteria for IT security parts1-3), FIPS 140-2 level 3 and 4, ISO/IEC 7816 Identificationcards—Integrated circuit cards parts 1-5, ISO/IEC14443 Identificationcards—Contactless integrated circuit cards—Proximity cards parts 1-4,and EMVCo.

As seen in FIG. 1, a consumer, considering a possible purchase, queriesthe amount remaining on her smart debit card 100 typically by pushing abutton 102, thereby activating a display 104 which displays her debitcard balance. It is a particular feature of the present invention, thatby virtue of the stand-alone operation of the smart debit card, theconsumer may obtain an indication of the debit card balance at anylocation and not only at a point of sale terminal or ATM. It isappreciated that the display may be activated by any other suitableactivation activity, such as a user-secure biometric interaction withthe user or the entry of a pin code.

The consumer, noting that the debit card balance is insufficient for thecontemplated purchase, goes to an ATM 106 to add value to the smartdebit card. It is appreciated that the function of adding or subtractingvalue from the smart debit card is highly secured in accordance with oneor more certification standards commonly used in the banking industry,such as those referenced above and is not accessible to the holder ofthe smart debit card.

The consumer confirms the updated debit card balance by stand-aloneoperation of the smart debit card and then proceeds to make a purchase.Following the purchase, the consumer confirms the updated debit cardbalance by using the smart debit card in a stand-alone mode ofoperation.

Reference is now made to FIG. 2, which is a simplified pictorialillustration of a scenario demonstrating typical use of a smart creditcard, constructed and operative in accordance with a preferredembodiment of the present invention. The term “smart credit card” asused throughout refers to a credit card including a certified smart cardchip and is retrofitted for stand-alone operation. The physicaldimensions of the card are preferably in compliance with the abovestandards.

As seen in FIG. 2, a consumer, considering a possible purchase, queriesthe amount remaining on his smart credit card 200 typically by pushing abutton 202, thereby activating a display 204 which displays remainingauthorized credit amount. It is a particular feature of the presentinvention, that by virtue of the stand-alone operation of the smartcredit card, the consumer may obtain an indication of the remainingauthorized credit at any location and not only at a point of saleterminal or ATM. It is appreciated that the display may be activated byany other suitable activation activity, such as a user-secure biometricinteraction with the user or the entry of a pin code.

The consumer, noting that his remaining authorized credit is sufficientfor the contemplated purchase, then proceeds to make a purchase.Following the purchase, the consumer confirms the updated remainingauthorized credit card amount by using the smart credit card in astand-alone mode of operation, thereby reassuring the consumer that thecorrect amount was charged to his credit card.

It is appreciated that the debit card and credit card describedhereinabove with reference to FIGS. 1 and 2 are examples of smart cardsconstructed and operative in accordance with the present invention.Other examples include electronic identification cards and electronicaccess control cards.

Reference is now made to FIG. 3, which is a simplified illustration of asmart card 300 constructed and operative in accordance with a preferredembodiment of the present invention and including a certified smart cardchip, retrofitted to work with a display in a stand-alone mode ofoperation.

The retrofitted conventional smart card of the present invention may beemployed as a debit card or credit card as described hereinabove withreference to FIGS. 1 & 2 or as any other suitable secured card whichmeets the above-referenced certification standards.

As seen in FIG. 3, smart card 300 comprises a conventional smart cardsubstrate 302 on which is mounted at least one and possibly both of acontact interface 304 and a contactless interface 306. A certified smartcard chip 308, which includes a secure communications controller, ismounted on substrate 302 and is employed in a retrofitted contextwherein it operates in a manner other than its intended manner of use.Certified smart card chips 308 are designed for communication of securedata stored on a smart card exclusively with a certified smart cardreader.

The certified smart card chip that is employed in the example describedhereinbelow is AT90AZ3636CFT, commercially available from AtmelCorporation 2325 Orchard Parkway San Jose, Calif. USA.

The certified smart card chip 308 preferably contains secure data, suchas customer identification and account data, as well as secure accesscircuitry, preferably embodied in a communications controller and infirmware, designed to permit communication of the secure data,exclusively with a certified smart card reader.

A bus 310 typically interconnects the certified smart card chip 308 withcontact interface 304. Contactless interface 306 is typically connectedto certified smart card chip 308 via a bi-directional connection 311. Inaccordance with a preferred embodiment of the invention, a display 312is mounted on substrate 302 and is typically coupled via a displaydriver 314 to a bus 316. Optionally a keyboard 317 and/or an audiotransducer 318 and/or a real time clock 319 may also be coupled to bus316.

It is a particular feature of the present invention that retrofitemulation hardware 320 is provided, typically in communication withbuses 310 and 316, for enabling retrofitted stand-alone operation ofcertified smart card chip 308. It is also a particular feature of thepresent invention that retrofit firmware 322 is provided, also typicallyin communication with bus 310, for operating certified smart card chip308 in association with display 312. Retrofit firmware 322 preferablyresides on certified smart card chip 308 but alternatively may resideelsewhere on the card 300. A battery 324 is also provided inter alia forpowering the display 312, retrofit emulation hardware 320 and certifiedsmart card chip 308. It is appreciated that retrofit emulation hardware320 may alternatively be embodied in a programmable device.

A manually operable display control switch 326 is preferably providedand preferably directly coupled to retrofit emulation hardware 320.

Reference is now made to FIGS. 4, 5 and 6, which together are asimplified electronic diagram of the smart card of FIG. 3.

As seen in FIG. 4, the following terminals of certified smart card chip308 are connected to bus 310: VCC and RST, both via an EXT_PWR line; CLKvia an ISO_CLK line; GND; IO1 via an SCL line; and IO0 via an SDA line.

Contact interface 304 (FIG. 3) is connected via bus 310 to certifiedsmart card chip 308.

Contactless interface 306 (FIG. 3) is preferably embodied in a parallelconnected inductor 402 and capacitor 404, which together define anantenna. The contactless interface 306 preferably is connected betweenthe RF1 and RF2 terminals of the certified smart card chip 308 viabi-directional connection 311 (FIG. 3).

Turning now to the retrofit emulation hardware 320 (FIG. 3), it is seenin FIG. 4 that the retrofit emulation hardware 320 includes controllogic circuitry 406 which receives electrical power from powermanagement circuitry 408, which in turn is connected to battery 324(FIG. 3).

As seen particularly in FIGS. 5 and 6, power management circuitry 408preferably includes a switch actuation sensor 410 which is coupled toswitch 326 (FIG. 3). Switch actuation sensor 410 provides a switchactuation status output via bus 316 (FIG. 3) to first and second relaycontrol circuits 414 and 416, which form part of the power managementcircuitry 408.

Relay control circuitry 414 turns on a FET 418 when switch 326 isactuated. FET 418 functions as a relay such that when FET 418 is turnedon, electrical power from battery 324 is supplied via bus 310 tocertified smart card chip 308 at the VCC power terminal and as a logicreference to the RST terminal thereof.

The output of FET 418 is also supplied via a resistor 420, to bus 316(FIG. 3) to serve as a pull-up logic reference voltage.

Relay control circuitry 416 turns on a FET 422 when switch 326 isactuated. FET 422 functions as a relay such that when FET 422 is turnedon, electrical power from battery 324 is supplied via an INT_PWR line tocontrol logic 406, display driver 314 (FIG. 3), and to an interval timer426, which forms part of the retrofit emulation hardware 320.

Battery power is directly supplied irrespective of the actuation stateof switch 326 to optional real time clock circuitry 319 (FIG. 3). Realtime clock circuitry 319 preferably includes a crystal oscillator 432which provides an output to a real time clock chip 434, preferably anRV-8564-C2, commercially available from Micro Crystal AG

Mählestrasse 14 CH-2540 Grenchen, Switzerland. The output of real timeclock chip 434 may be supplied to certified smart card chip 308 at theIO0 and IO1 terminals thereof via bus 316, control logic 406 and bus310. Real time clock circuitry 319 is useful for real time security codegeneration. Such real time generated security codes may be displayed toa user on display 312 and employed for transaction authentication.

IO0 and IO1 terminals of certified smart card chip 308 are connected viarespective SDA and SCL lines to corresponding terminals of controlcircuitry 442, which forms part of control logic circuitry 406.

Control circuitry 442 includes command interpretation functionalitywhich directs outputs received along the SDA and SCL lines fromcertified smart card chip 308 to one or more of the following elementsof the retrofit emulation hardware 320 and of the display driver 314:relay control circuitry 414 via bus 316, relay control circuitry 416 viabus 316 and interval timer 426.

Control circuitry 442 also includes active pull-down circuitry, whichcouples the SDA line and thus the IO0 terminal of certified smart cardchip 308 via a resistance to ground when control circuitry 442 ispowered.

Reference is now made to FIG. 7, which is a simplified general flowdiagram illustrating retrofit-enabled operation of a preferredembodiment of the present invention in a stand-alone mode of operation.

Referring to the example illustrated in FIGS. 4, 5 and 6, when the useractuates switch 326, this provides a switch actuation signal, which issensed by a switch actuation sensor 410, forming part of the retrofitemulation hardware 320. An output of switch actuation sensor 410 causesrelay control circuitry 414 in the retrofit emulation hardware 320 tosupply a voltage from battery 324 simultaneously to the VCC and RSTterminals of certified smart card chip 308.

The output of switch actuation sensor 410 also causes relay controlcircuitry 416 in the retrofit emulation hardware 320 to supply a voltagefrom battery 324 to simultaneously actuate clock oscillator 428 andcontrol circuitry 442 in the retrofit emulation hardware 320. Clockoscillator 428 begins to provide a clock signal to the clock terminalCLK of the certified smart card chip 308.

If certified smart card chips 308 other than the AT90AZ3636CFT chip areemployed, specific timing requirements for supply of voltages to thepower, reset and clock terminals of such chips may be required to be metby retrofit emulation hardware 320.

It is appreciated that switch 326 may be embodied in a push button asillustrated in FIGS. 1 and 2 or alternatively may be any other suitabletype of switch such as an optical, touch, audio or other switch or acombination thereof.

The provision of voltages to the power VCC, reset RST and clock CLKterminals of the certified smart card chip 308 enables certified smartcard chip 308 to run retrofit firmware installed thereon including theretrofit firmware 322. The retrofit firmware 322 includes mode ofoperation identification functionality, which enables the certifiedsmart card chip 308 to distinguish between operation in communicationwith a conventional contact or contactless smart card reader andstand-alone operation in accordance with the present invention.

The foregoing functions are functions which were not originally enabledby the certified smart card chip 308 but are enabled by the retrofitprovided in accordance with the present invention. More specifically,the retrofitted functionality enables the certified smart card chip 308to operate in a stand-alone mode of operation employing the same dataterminal, IO0, which is used for non-stand-alone operation.

Preferably the mode of operation identification functionality senseswhether the serial data terminal IO0 of the certified smart card chip308 is in a positive or zero logic state. A positive logic stateindicates that a conventional contact smart card reader is galvanicallyconnected to the certified smart card chip 308 via contact interface304. A zero logic state indicates that the certified smart card chip isconnected for operation in a stand-alone mode. The retrofit emulationhardware 320 provides a zero logic state connection to the data terminalIO0 in the absence of an external reader by means of active pull-downcircuitry located in control circuitry 442.

In the presence of an external reader, the certified smart card chip 308may communicate with the external reader via contact interface 304 as ifthe retrofit firmware and hardware was not present. If a contactlessreader is employed, the communication may be via contactless interface306. In either case, switch 326 is not actuated and thus controlcircuitry 442 is not powered with the result that the active pull-downcircuitry is not operative. It is noted that the example describedherein with reference to FIGS. 3-6 refers to communication via contactinterface 304, it being appreciated that functionality based oncommunication via contactless interface 306 may be alternativelyprovided.

It is thus appreciated that the present invention provides a retrofittedsmart card including a certified smart card chip including secure accesscircuitry permitting communication exclusively with a certified smartcard chip reader, a display and retrofitted circuitry operative toenable said certified smart card chip to communicate data to saiddisplay and also to communicate with said certified smart card chipreader.

Once the mode of operation identification functionality indicatesoperation of the certified smart card chip in a stand-alone mode ofoperation, the following takes place:

A. optionally the retrofit firmware 322 decouples the serial dataterminal IO0 from the communications controller which is built into thecertified smart card chip 308;

alternatively, the retrofit firmware 322 employs the communicationscontroller which is built into the certified smart card chip 308;

whether or not the retrofit firmware 322 decouples the serial dataterminal IO0 from the communications controller which is built into thecertified smart card chip 308, the retrofit firmware 322 controlscommunications to and from the certified smart card chip 308 via dataterminal IO0

B. optionally, the retrofit firmware employs the clock signals receivedfrom clock oscillator 428;

alternatively, the retrofit firmware employs clock signals received froma clock oscillator built into the certified smart card chip 308;

C. the retrofit firmware 322 operates the certified smart card chip 308for processing and displaying secure data on the display 312.

In the example of a debit card described hereinabove with reference toFIG. 1, the retrofit firmware 322 retrieves the current debit cardbalance from an internal non-volatile memory of the certified smart cardchip 308 and outputs it via data terminal IO0, bus 310 and bus 316 todisplay driver 314.

In the example of a credit card described hereinabove with reference toFIG. 2, the retrofit firmware 322 retrieves the remaining availablecredit amount from an internal non-volatile memory of the certifiedsmart card chip 308 and outputs it to display driver 314.

D. the retrofit firmware configures the display driver to display thesecure data;

E. the retrofit firmware sets a predetermined time duration on theinterval timer 426;

F. the retrofit firmware 322 issues a single instruction which resultsin the sequence indicated below:

-   -   the retrofit emulation hardware 320 terminates the supply of        electrical power to the certified smart card chip 308, thus        disabling the retrofit firmware 322; and    -   preferably once the supply of electrical power to the certified        smart card chip 308 has been terminated and the retrofit        firmware has been disabled, the display driver 314 causes the        display 312 to display the secure data for the predetermined        time duration set on interval timer 426;    -   at the end of the predetermined time duration, the supply of        electrical power to the display driver 314, the display 312, the        interval timer 426 and the control logic circuitry 406 is        terminated.

It will be appreciated by persons skilled in the art that the presentinvention is not limited by what has been particularly shown anddescribed hereinabove. Rather the scope of the present inventionincludes both combinations and subcombinations of the various featuresdescribed hereinabove as well as modifications thereof which would occurto persons skilled in the art upon reading the foregoing description andwhich are not in the prior art.

The invention claimed is:
 1. A retrofitted smart card comprising: acertified smart card chip; a display; retrofitted emulation circuitryoperative to enable said certified smart card chip to communicateinformation to said display notwithstanding that said certified smartcard chip is configured for communication only with an externalread/write device; and retrofit firmware for operating said certifiedsmart card chip at least in the absence of an external read/writedevice; and a display control switch; wherein, upon actuation of thedisplay control switch, voltage is supplied to the certified smart cardchip thereby enabling the certified smart card chip to run the retrofitfirmware, wherein the retrofit firmware can distinguish betweenoperation in communication with the external read/write device andoperation in a stand alone mode; wherein when the retrofit firmwaredetects operation in the stand-alone mode; I) the retrofit firmwarecontrols communications to and from said certified smart card chip; II)the retrofit firmware employs clock signals received from a clockoscillator; III) the retrofit firmware operates the certified smart cardchip for processing and displaying secure data on the display; IV) theretrofit firmware configures a display driver to display said securedata; V) the retrofit firmware sets a predetermined time duration on aninterval timer; or VI) the retrofit firmware issues a single instructionwhich results in the sequence indicated below: a) a supply of electricalpower to the certified smart card chip is terminated, thus disabling theretrofit firmware; and b) once the supply of electrical power to saidcertified smart card chip has been terminated and the retrofit firmwarehas been disabled, the display driver causes the display to display thesecure data for a predetermined time duration; and c) at the end of thepredetermined time duration, the supply of electrical power to saiddisplay is terminated.
 2. A retrofitted card according to claim 1 andalso comprising a substrate supporting said certified smart card chip,said display and said retrofitted circuitry, said substrate having athickness which does not exceed 0.8 mm.
 3. A retrofitted card accordingto claim 2 and also comprising at least one of: a contact interface anda bus interconnecting said certified smart card chip with said contactinterface; and a contactless interface mounted on said substrate and abidirectional connection interconnecting said certified smart card chipwith said contactless interface.
 4. A retrofitted card according toclaim 1 and also comprising: an electrical power element operative forpowering said certified smart card chip, said retrofitted circuitry andsaid display; and power management circuitry operative to provideelectrical power to said certified smart card chip and to said displaygenerally at non-overlapping times.
 5. A retrofitted card according toclaim 1 and wherein said retrofitted circuitry includes hardwareexternal to said certified smart card chip.
 6. A retrofitted cardaccording to claim 1 and wherein said certified smart card chip is asmart card chip which is operable to communicate data only with anexternal read/write device and with said display.
 7. A retrofitted cardaccording to claim 1 and wherein said certified smart card chip isemployed in a retrofitted context to operate in a manner other than itsintended manner of use.
 8. A retrofitted card according to claim 1 andalso comprising: power management circuitry including a switch actuationsensor which is coupled to said display control switch; and said switchactuation sensor providing a switch actuation output to first and secondrelay control circuits.
 9. A retrofitted card according to claim 8 andwherein said retrofitted circuitry comprises control logic circuitrywhich receives electrical power from said power management circuitry.10. A retrofitted card according to claim 9 and wherein said secondrelay control circuit is operative in response to said switch actuationoutput to provide electrical power to said control logic circuitry, to adisplay driver and to an interval timer.
 11. A retrofitted cardaccording to claim 8 and wherein said first relay control circuit isoperative in response to said switch actuation output to provideelectrical power to said certified smart card chip.
 12. A retrofittedcard according to claim 1 and also comprising real time clock circuitryproviding real time security code generation.
 13. The retrofitted smartcard of claim 1, wherein when the retrofit firmware detects operation inthe stand-alone mode the retrofit firmware controls communications toand from said certified smart card chip.
 14. A method of providing asmart card with a card-mounted display function comprising: providing acertified smart card chip; associating a display with said certifiedsmart card chip; emulating an external read/write device to enable saidcertified smart card chip to communicate with said displaynotwithstanding that said certified smart card chip had originally beenconfigured for secure communication only with an external read/writedevice; running retrofit firmware residing on said certified smart cardchip for operating said certified smart card chip at least in theabsence of an external read/write device; providing a switch actuationsignal when a user actuates a display control switch; and responsive tosaid switch actuation signal, supplying a voltage to said certifiedsmart card chip and simultaneously actuating a clock oscillator whichbegins to provide a clock signal to a clock terminal of said certifiedsmart card chip.
 15. A method for providing a smart card with acard-mounted display function according to claim 14 and wherein said:certified smart card chip includes secure access circuitry permittingcommunication exclusively with a certified smart card chip reader; andsaid method also comprises causing said certified smart card chip tocommunicate data to said display and also to communicate with saidcertified smart card chip reader.
 16. A method for providing acard-mounted display function according to claim 14 and wherein saidsupplying a voltage to said certified smart card chip enables saidcertified smart card chip to run retrofit firmware installed thereonincluding mode of operation identification functionality, which enablessaid certified smart card chip to distinguish between operation incommunication with a conventional contact or contactless smart cardreader and stand-alone operation.
 17. A method for providing acard-mounted display function according to claim 16 and wherein: saidstand-alone mode of operation employs at least some of the same dataterminals which are used for non-stand-alone operation; and said mode ofoperation identification functionality senses whether the serial dataterminal of said certified smart card chip is in a positive or zerologic state, wherein a positive logic state indicates that aconventional contact smart card reader is galvanically connected to saidcertified smart card chip and zero logic state indicates that saidcertified smart card chip is connected for operation in a stand-alonemode.
 18. A method for providing a card-mounted display functionaccording to claim 17 and wherein when said certified smart card chipoperates in a stand-alone mode of operation, at least one of thefollowing steps occurs: I. said retrofit firmware controlscommunications to and from said certified smart card chip; II. saidretrofit firmware employs the clock signals received from a clockoscillator; III. said retrofit firmware operates said certified smartcard chip for processing and displaying secure data on said display; IV.said retrofit firmware configures a display driver to display saidsecure data; V. said retrofit firmware sets a predetermined timeduration on an interval timer; or VI. the retrofit firmware issues asingle instruction which results in the sequence indicated below: thesupply of electrical power to said certified smart card chip isterminated, thus disabling the retrofit firmware; and once the supply ofelectrical power to said certified smart card chip has been terminatedand the retrofit firmware has been disabled, said display driver causessaid display to display the secure data for a predetermined timeduration; and at the end of the predetermined time duration, the supplyof electrical power to said display is terminated.
 19. A retrofittedsmart card comprising: a certified smart card chip; a display;retrofitted emulation circuitry operative to enable said certified smartcard chip to communicate information to said display notwithstandingthat said certified smart card chip is configured for communication onlywith an external read/write device; and retrofit firmware for operatingsaid certified smart card chip at least in the absence of an externalread/write device; a display control switch; power management circuitryincluding a switch actuation sensor which is coupled to said displaycontrol switch, said switch actuation sensor providing a switchactuation output to first and second relay control circuits; wherein,upon actuation of the display control switch, voltage is supplied to thecertified smart card chip thereby enabling the certified smart card chipto run the retrofit firmware, wherein the retrofit firmware candistinguish between operation in communication with the externalread/write device and operation in a stand alone mode; wherein saidretrofitted circuitry comprises control logic circuitry which receiveselectrical power from said power management circuitry; and wherein saidsecond relay control circuit is operative in response to said switchactuation output to provide electrical power to said control logiccircuitry, to a display driver and to an interval timer.